A founder from Jaipur called me after a bad experience. His startup had hired a lawyer for DPDP Act compliance. Six months and a big invoice later, he still didn’t have a working privacy policy.…
A founder scaling his D2C brand past 50 employees asked me a question that comes up constantly around that growth stage. “We’re getting more contracts, more compliance work, more legal questions every month. Should we…
A founder running a fintech analytics startup out of Noida sent me a dataset question last month. “We stripped out names and replaced them with customer IDs before sharing this with our analytics vendor. That…
A founder running a SaaS company out of Bengaluru asked me something I hear almost every week now. “We’re already GDPR compliant. Doesn’t that automatically cover us for the DPDP Act too?” Short answer, not…
A founder running a health-tech app out of Chennai asked me a fair question last month. “We’re not huge yet. Do we really need to do a full impact assessment before launching this new feature?”…
A founder running a logistics-tech company out of Hyderabad called me with a mix-up I hear often. “We already have a DPO,” he said. “Do we really need a separate Grievance Officer too? Feels like…
A founder running a fintech startup out of Gurugram messaged me last month with a fairly simple question. “A customer emailed us asking to withdraw consent and delete his data. Do we have to do…
A client of mine, runs a D2C skincare brand out of Bengaluru, called me last year in a complete panic. Her email marketing vendor, one of those popular SaaS tools everyone uses, had a data…
A founder sent me his company’s privacy policy last month. He seemed proud of it. “We copied and adapted this from a well-known SaaS company’s website,” he said. “That should cover us, right?” It didn’t.…
A founder told me something during a recent consultation that I hear often. “We use maybe fifteen different vendors, cloud storage, payroll software, email marketing tools, analytics platforms. I genuinely don’t know if any of…
